Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-54169

[Node addition] bad_record_mac and unexpected_msg TLS errors

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Blocker
    • Resolution: Fixed
    • 7.1.1, Elixir, 7.1.2
    • 7.1.2
    • ns_server
    • Untriaged
    • 1
    • Yes

    Description

      When I'm trying to add an elixir node to a 7.1.1 cluster I see the following error in the UI:

      Attention: Prepare join failed. Failed to establish TLS connection to node1.localhost:19001: {bad_record_mac, "TLS client: In state connection at tls_record_1_3.erl:340 generated CLIENT ALERT: Fatal - Bad Record MAC\n decryption_failed"}
      

      That error is generated by client side (7.1.1 node) in this case.

      At the same time on the server side ("node-being-added") I see the following error:

      =========================NOTICE REPORT=========================
      TLS server: In state wait_finished at ssl_gen_statem.erl:736 generated SERVER ALERT: Fatal - Unexpected Message
       - {unexpected_msg,{internal,{change_cipher_spec,<<1>>}}}
      

      Most likely the "Bad Record MAC" error on the client is a consequence of the unexpected_msg error on the server.

      It looks like some kind of erlang bug. We didn't see it before so this maybe a new behavior added by the latest erlang upgrade which is currently used in 7.1.2 and elixir now (that's the reason why I added 7.1.2 in the affected versions list).

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            sujay.gad Sujay Gad added a comment -

            Verified the fix on 7.1.2-3454.
            7.1.0/7.1.1 -> 7.1.2 upgrades are working as expected.

            sujay.gad Sujay Gad added a comment - Verified the fix on 7.1.2-3454. 7.1.0/7.1.1 -> 7.1.2 upgrades are working as expected.

            Build couchbase-server-7.5.0-3380 contains tlm commit 07608d7 with commit message:
            MB-54169: Switch to erlang 24.3.4.4

            build-team Couchbase Build Team added a comment - Build couchbase-server-7.5.0-3380 contains tlm commit 07608d7 with commit message: MB-54169 : Switch to erlang 24.3.4.4

            Build couchbase-server-7.5.0-3381 contains tlm commit 798e7a2 with commit message:
            MB-54169: Fix cbdeps-version for erlang in BD manifest

            build-team Couchbase Build Team added a comment - Build couchbase-server-7.5.0-3381 contains tlm commit 798e7a2 with commit message: MB-54169 : Fix cbdeps-version for erlang in BD manifest

            Build couchbase-server-8.0.0-1187 contains tlm commit 798e7a2 with commit message:
            MB-54169: Fix cbdeps-version for erlang in BD manifest

            build-team Couchbase Build Team added a comment - Build couchbase-server-8.0.0-1187 contains tlm commit 798e7a2 with commit message: MB-54169 : Fix cbdeps-version for erlang in BD manifest

            Build couchbase-server-8.0.0-1187 contains tlm commit 07608d7 with commit message:
            MB-54169: Switch to erlang 24.3.4.4

            build-team Couchbase Build Team added a comment - Build couchbase-server-8.0.0-1187 contains tlm commit 07608d7 with commit message: MB-54169 : Switch to erlang 24.3.4.4

            People

              sujay.gad Sujay Gad
              timofey.barmin Timofey Barmin
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty